Fanch
1 year ago
8 changed files with 133 additions and 19 deletions
@ -1,6 +1,6 @@ |
|||
dn: olcDatabase={2}mdb,cn=config |
|||
changeType: modify |
|||
replace: olcAccess |
|||
olcAccess: {0}to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn="cn=adminpwd,ou=system,$LDAPROOT" write by dn="$BINDDN" write by * none |
|||
olcAccess: {1}to dn.subtree="$LDAPROOT" by self read by dn="cn=adminro,ou=system,$LDAPROOT" read by dn="cn=adminpwd,ou=system,$LDAPROOT" read by dn="$BINDDN" write by * none |
|||
olcAccess: {0}to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn="cn=ldapui,ou=applications,$LDAPROOT" write by dn="$BINDDN" write by * none |
|||
olcAccess: {1}to dn.subtree="$LDAPROOT" by self read by dn="cn=ldapui,ou=applications,$LDAPROOT" read by dn="cn=postfix,ou=applications,$LDAPROOT" read by dn="cn=mattermost,ou=applications,$LDAPROOT" read by dn="cn=cloud,ou=applications,$LDAPROOT" read by dn="cn=mobilizon,ou=applications,$LDAPROOT" read by dn="$BINDDN" write by * none |
|||
olcAccess: {2}to * by dn="$BINDDN" write by * none |
|||
|
|||
@ -0,0 +1,25 @@ |
|||
# |
|||
# SCHEMA 'ownCloud' for 389DS (cn=schema) |
|||
# |
|||
# From http://doc.owncloud.org/server/6.0/admin_manual/configuration/auth_ldap.html |
|||
# |
|||
# Quota Field: |
|||
# ownCloud can read an LDAP attribute and set the user quota according to its value. |
|||
# Specify the attribute here, otherwise keep it empty. The attribute shall return |
|||
# human readable values, e.g. "2 GB". |
|||
# |
|||
# INSTALLATION: |
|||
# sudo ldapadd -Y EXTERNAL -H ldapi:/// -f owncloud.ldif |
|||
# |
|||
# SOURCE: |
|||
# https://github.com/valerytschopp/owncloud-ldap-schema |
|||
# |
|||
# WARNING: the spaces ' ' in the definitions are very important!!! |
|||
|
|||
dn: cn=schema |
|||
changetype: modify |
|||
add: attributetypes |
|||
attributetypes: ( 1.3.6.1.4.1.39430.1.1.1 NAME 'cloudQuota' DESC 'User Quota (e.g. 2 GB)' EQUALITY caseExactMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE ) |
|||
- |
|||
add: objectclasses |
|||
objectclasses: ( 1.3.6.1.4.1.39430.1.2.1 NAME 'nextCloudAccount' DESC 'nextCloud LDAP Schema' AUXILIARY MAY ( cloudQuota ) ) |
|||
@ -0,0 +1,59 @@ |
|||
#-------------------------------------------------------------------------- |
|||
# Copyright (c) 2017 Arthur Schiwon <blizzz@arthur-schiwon.de> |
|||
# |
|||
# Author: Arthur Schiwon <blizzz@arthur-schiwon.de> |
|||
#-------------------------------------------------------------------------- |
|||
# GNU AGPL version 3 or any later version |
|||
# |
|||
# This program is free software: you can redistribute it and/or modify |
|||
# it under the terms of the GNU Affero General Public License as |
|||
# published by the Free Software Foundation, either version 3 of the |
|||
# License, or (at your option) any later version. |
|||
# |
|||
# This program is distributed in the hope that it will be useful, |
|||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|||
# GNU Affero General Public License for more details. |
|||
# |
|||
# You should have received a copy of the GNU Affero General Public License |
|||
# along with this program. If not, see <http://www.gnu.org/licenses/>. |
|||
# |
|||
#-------------------------------------------------------------------------- |
|||
# 1.3.6.1.4.1.49213 Nextcloud OID |
|||
# 1.3.6.1.4.1.49213.1 Nextcloud LDAP Elements |
|||
# 1.3.6.1.4.1.49213.1.1 AttributeTypes |
|||
# 1.3.6.1.4.1.49213.1.2 ObjectClasses |
|||
#-------------------------------------------------------------------------- |
|||
|
|||
# Attribute Types |
|||
#----------------- |
|||
|
|||
attributetype ( 1.3.6.1.4.1.49213.1.1.1 NAME 'nextcloudEnabled' |
|||
DESC 'whether user or group should be available in Nextcloud' |
|||
EQUALITY caseIgnoreMatch |
|||
SUBSTR caseIgnoreSubstringsMatch |
|||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE) |
|||
|
|||
|
|||
attributetype ( 1.3.6.1.4.1.49213.1.1.2 NAME 'nextcloudQuota' |
|||
DESC 'defines how much disk space is available for the user' |
|||
EQUALITY caseIgnoreMatch |
|||
SUBSTR caseIgnoreSubstringsMatch |
|||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE) |
|||
|
|||
# Object Classes |
|||
#--------------- |
|||
|
|||
objectclass ( 1.3.6.1.4.1.49213.1.2.1 NAME 'nextcloudUser' |
|||
DESC 'A Nextcloud user' |
|||
SUP top AUXILIARY |
|||
MUST ( cn ) |
|||
MAY ( nextcloudEnabled $ nextcloudQuota ) |
|||
) |
|||
|
|||
objectclass ( 1.3.6.1.4.1.49213.1.2.2 NAME 'nextcloudGroup' |
|||
DESC 'A Nextcloud group' |
|||
SUP top AUXILIARY |
|||
MUST ( cn ) |
|||
MAY ( nextcloudEnabled ) |
|||
) |
|||
Loading…
Reference in new issue